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APPENDIX A 

DESCRIPTION OF PROTOTYPE TESTING SIMULATION MODEL 



1 . Definition of Terms 

The following terms were defined in the text: state, module, task, 

and primary state. Their usage in this description of the simulation of the 
model will be consistent with these definitions. The status of a module was 
defined to be the information required to identify a particular module, and 
its state, that is executing a task for a given input. Thus, the status of 
a module identifies: module, state, task, and input number. 

All time values in the program were based on the standard time unit. 

The standard time unit may be defined as the user desires. The only requirement 
is that the user must be consistent throughout the program and that all time 
values be integers. 

2. Program Characteristics 

The simulation of the model was an event store type of simulation. 

In this type of simulation the time is advanced each time an event occurs 
instead of on a fixed interval. This prevented the occurrence of a large 
number of intervals during which there was no activity. This type of 
simulation maintains the complete status of the system during the simulation 
because events are executed in the order in which they occur. The events 
in this simulation consisted of the arrival of inputs, the completion of a 
primary state, data collection events, and the termination event. The 
event that represented the completion of a primary state was always followed 
by the occurrence of the next primary state unless the input terminated or 
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the resources required to enter the next primary state were not available. A 
data collection event was a time period during which the user could measure 
any parameter of the simulation. These occurred at regular intervals 
throughout the running of the simulation and could be used to gather data to 
compute such statistics as average queue size. 

The programming language chosen for the simulation language was FORTRAN 
IV. The reason for this choice was to ensure the portability of the program. 
FORTRAN is not an ideal programming language for simulation. Other languages 
such as GPSS (General Purpose Simulation System) provide many of the building 
blocks needed for the simulation such as the clock and the calendar. Although 
FORTRAN does not provide these blocks, it is readily available at most insti- 
tutions. A limit to the portability of the program is the random number 

generator which was used in the simulation. The program used the LLRANDOM 
package available at the W. R. Church Computer Center. The random numbers 
were passed by subroutine calls. By adjusting these calls, a new random 
number generator may be introduced into the program. 

The simulation was designed to be able to simulate a wide range of 
computer systems. This was implemented by allowing the user to input various 
characteristics of the system. These characteristics are discussed in the 
input section of the appendix. The resources used were identified throughout 
the program only by number. The user was to assign both the type of resources 
the system uses and the amount of each resource available to the system. The 
only requirement was that all quantities were to be integer values. The 
workload for the system was defined as a system of tasks. The user was 
required to specify the priority of tasks. Modules were identified by number. 
The user was to specify which module or modules was to execute each task. The 
user was also to specify which resources and primary states were required in 
the performance of each task. 
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The simulation was programmed in a modular fashion. Each major 
function of the simulation consisted of a separate subroutine. This design 
was chosen to facilitate modifications to the program and to improve the 
readability of the program. All major data structures and variables were 
made available to all subroutines by the use of common blocks. 

3. Inputs 

The simulation allowed the user to vary the input parameters listed 
below. The description is in the order in which the inputs were required by 
the program. If no range is given the parameter did not have limits placed 
upon it by the program. Limits were caused by the size of the data 
structure used in the program. The user could have chosen any reasonable 
value for the unlimited parameters. Subscripted variables indicate multi- 
dimensional data structures. 

* MAXIN — Determined the number of inputs the system may 
process at one time. Range was one to ten inputs. 

* MEANIN — Represented the mean interarrival time for the 
system. Units had to be standard time units. 

* NUMRES — Total number of resources required by the system 
for proper functioning of the system plus one. The additional 
resource was the system time representation. This allowed 
the user to specify the amount of time the resources were in 
use. The range of NUMRES was from two to ten. 

* MAXRES(I) — This vector gave the maximum amount of each 
resource available to the system. The units had to be in 
standard time units. The range of I was from one to NUMRES. 
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* NUMTSK — This was the number of tasks assigned to 
the system. The range was from one to ten tasks. 

* PRECTSK( I ,J ) — This matrix was used to give the 

precedence relationships among tasks. Each column 
was identified by a task. This task blocks all tasks 
listed in the column. The first element of each 
column was the number of tasks blocked by the given 
task. For example, if column number three contained 
the following numbers reading from top down: 2, 4, 6. 

This would indicate task number three blocked two tasks, 
namely task four and task six. The variable I had a 
range from one to NUMTSK. J was confined to the same 
range. 

* MAXSEQ — This was the maximum number of primary 
states that a module had to go through in order to 
execute a task. The range was one to eight states. 

* D0TSK(I,J) — This matrix showed the different 
sequences of primary states that a module was 
required to go through to complete one task. Each 
row represented the path for one module to perform 
one task. The first element of a row was the task, 
the second element was the module, and the remaining 
elements were the sequence of primary states. A zero 
indicated the sequence had been completed. The 
variables I and J had a range of one to ten. 
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* ENDTR — This was the number of different primary 
states for every module. The maximum value was 
thirty. 

* TSKRES ( I , J ) — This matrix gave the amount of each 

resource required for the execution of each primary 
state of a module and the associated task. Each row 
was the resources required by one task/state/module. 

Thus, the first three elements of each row repre- 
sented the respective task, state, and module 
associated with the resource requirements given in 
that row. The first entry represented the time 

that the resources would be required in that state. 

The variable I had a range from one to ENDTR. The 
range of J was from one to NUMRES plus three. 

The following parameters were assigned values in the start subroutine 
of the program and may be varied as the user desires: 

* MAXTIM — This variable gave the total time the 
simulation was to be run. Units were standard time 
units. The value assigned was 1000000. 

* DATINV — This variable was the time between data 
collection events. Units were standard time units. 

The value assigned was 2500. The user was free to 
choose any value for this parameter. However, the 
value chosen should be realistic in terms of the 
other time values used in the program. 

* IX — This variable was the seed for the random 
number generator. It could have had a value 
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The system table was represented by a group of vectors. A vector 
was a one dimensional array that was used to store status information. The 
group of vectors was accessed by a common index. The index was stored on 
a separate vector in order of request for resources. Thus, a complete 
description of any module waiting for resources could be obtained without 
a sequential search of the table. This facilitated the user specification 
of service discipline. 

The simulation calendar was represented by a group of vectors in the 
same manner as the system queue. Besides the information describing the 
status of modules that were in service, this group also contained vectors 
representing simulation information such as event type and event time. The 
event time was the time representing the scheduled completion of the event. 
The event type differentiated among end of state events, data collection 
events, arrival of input events, and termination events. A zero in this 
vector represented an empty slot on the simulation calendar. Each time an 
event was selected the event time vector was searched sequentially to 
determine the next event occurrence time in the simulation. 

The event records represented a diverse group of data structures used 
to preserve information about the events in the simulation. The general 
form of these data structures were matrices with each row representing one 
input that was being processed by the system and a column for each data 
element to be preserved for each state. The data elements were items such 
as time input entered system, time module used resources in a primary state, 
and the order in which primary states were executed. In order to avoid being 
overwritten, these matrices had to be printed out at the end of each sequence 
of tasks. The column index to these matrices was based on the number of 
state transitions and each index was adjusted for the proper number of 
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elements being preserved in the matrix. 

Utility records were used to save information as it was being moved 
from the system queue to the simulation calendar. 

5. Output 

Two types of output were provided for in the simulation of the model. 
These were event reports and sequential reports. The event reports occurred 
whenever the event with which they were associated was terminated. Three 
types of event reports were used in the simulation. These were end of state 
report, end of task sequence report and termination report. 

The end of state report report occurred at the end of every primary 
state. The report contained the status of the module. The report gave 
timing information about the primary state just completed. This included 
the time the module was placed in the table, the time the module entered 
service, time the module finished service, total time in the system, total 
time in service, and total time in table. The report showed the amount of 
each resource available after the resources used in that state were returned 
to the system. A printout of the system table was shown after the next 
module status had been added to the table. All modules that were scheduled 
at that time were reported giving the status of each module. The report 
concluded with the status of all system resources after the scheduling 
activity had been completed. 

The end of task sequence report occurred after the complete sequence 
of tasks for one input had been completed. The first part of the report 
gave the sequence of states, identifying each state by task and module. The 
second part of the report gave information about the timing of the task 
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sequence. This included the time the first module entered service, the time 
the last module finished processing, the total time required if the sequence 
of tasks had been processed serially, and the total time the input was in the 
system. 

The termination report gave the total number of inputs that were lost 
by the system when it was already processing the maximum number of inputs 
allowed in the system. This report could be used to give averages from the 
data collection events such as average queue size and average percent of 
each resource being used by the system. 

Sequential reports were not used by the simulation but could have 
been initiated by the data collection event and used to give an instan- 
taneous status of the system at regular intervals. 

6. Program Flow 

The program commenced with a call to subroutine START. This sub- 
routine initialized all the variables and returned control to the main program. 
The next event was selected by the subroutine NEXT. This subroutine selected 
an event based on a sequential search of the simulation calendar. Control 
was returned to the main program which called the appropriate subroutine to 
handle the selected event. 

If the next event was an arrival of an input, subroutine NEWINP was 
called. Subroutine NEWINP inserted the first module status on the system 
table with a call to the subroutine PUTONQ. This occurred only if there was 
space in the system for another input and if there was room in the system 
table. If there was no space in the system, the input was counted as a lost 
input. If there was no room on the system table, the program was terminated 
with an error condition. With the exception of an error condition, the next 
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arrival of an input was placed on the simulation calendar with a call to the 
subroutine ENTER. A call was placed to the subroutine SKED. This subroutine 
ascertained whether currently available system resources were sufficient 
for a module on the system table to commence service. All modules 
were examined on a first-come-first served basis and as many as possible were 
placed in service. The end of state event was entered on the simulation calendar. 
Control was passed to the main program where the next event was selected. 

The subroutine ENDSTT was called. The resources used by the module 
were returned to the system. If the completion of the state did not complete 
the task, the next module status was placed on the table and subroutine SKED 
was called. If the completion of the state completed the task, the next task 
was selected. The first module status of the task was placed on the system 
table and again SKED was called. In either case, STTDUMP was called to produce 
the end of state report. If the task was a termination task, subroutine DUMPIN 
was called to produce an end of task sequence report. Control was returned 
to the main program. 

Two other types of events could occur. These were the data collection 
event and the termination event. A data collection event resulted in a call 
to subroutine WHAT. This subroutine collected the assigned information, 
scheduled the next data collection event, and returned control to the main 
program. The termination event occurred at the maximum simulation time and 
produced the termination report. 

7. Desirable Features 

The generality of the simulation, and hence its applicability to any 
real system, was restricted because certain parameter choices are not given to 
the user. These parameters included the queueing discipline, resource allocation 
policy and the distribution of time spent in a state. Ideally, there would 
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be many choices of these parameters with the user having the ability to specify 
the discipline, policy, and distribution that best represented the system he 
intended to test. 

During the development of the program, other features that would have 
added to the usefulness of the simulation were discovered. One such feature 
was a debug package. This could include such items as a stall alarm. This 
alarm would give a warning if a module was in the system table for an excessive 
time period. The length of this time period could be selected and adjusted 
by the user. This alarm could be used to detect modules that were deadlocked 
or to set a maximum time that a module could be in the table before a failure 
occurred. Beizer [7] indicated various other alarms that would appear useful. 
These include watchdog timer alarms, cycle alarms, improper sequence alarms, and 
multiple or missed interrupt alarms (if the user chooses to simulate interrupts). 

Another feature that would be useful is a restart capability. The 
status of the system at the termination of the simulation could be saved in 
a dump file. The user would be allowed to stop the system and make any obser- 
vations he desired and restart from the same point. This ability would be 
particularly useful in investigating errors that occurred in a random fashion. 

The above feature could be best utilized as an interactive program. 

The tester could watch the display of pertinent system data as the simulation 
operated. When an unusual occurrence was observed, the tester could stop the 
simulation and query parameters to determine what had taken place. Having 
made his observations, the tester would have the choice of restarting the 
simulation, continuing from the point of interruption, or saving the data 
produced on hard copy. 

8. Limitation 

The simulation that was programmed had a limitation for practical 
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use in testing. The limitation was the size of the system that could 
be represented. The number of tasks and other elements were limited. This 
was done to reduce turn-around time during the development of the program. 
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APPENDIX B 



FORTRAN EXAMPLE PROGRAM CODE 



Node 



1 



2 



4 

7,11 

8 

12 

15 

14 

17 



2 1 



Code 

C ~ 3UBSOUT I N E FOR COMPUTING J-N, Y-N, I-N, AND 

C ASYMPTOTIC EXPANSION IS USED FOR LARGE ARGUE 

C 

SUBROUTINE BESSEL (XJ NORD , BJN, BY , BIN , BK ) 

PI = 3. 14 152927 
GAM = .57721566 
C 

FN = NORD 

IF (X - FN - b.) 1,200,200 

1 XA = X / 2. 

XB = XA * XA 
C 

C COMPUTATION OF J-7.ERO AND I-ZERO 

C 

N = 0 
C 

C COMPUTATION OF J-N AND I-N BY POWER SERIES 

C 

3 AN = N 
T = 1. 

S = -1. 

10 IF (AN) 9999,20, 12 
12 T = T * XA / AN 
AN = AN - 1. 

GO TO 10 
20 BJN = T 
BIN = T 

DO 30 K = 1 ,K 
DEN = K * {K + N) 

T = T * XB / DEN 
IF {{BJN + T) - BJN) 25,50,25 
25 BJN = BJN + T*S 
BIN = BIN ♦ T 
30 S = -S 
C 
C 
C 

50 IF (N - 1) 75,130,55 
C 

C K - N IS COMPUTED FROM ASYMPTOTIC EXPANSION 

C IF X IS GREATER THAN N ♦ 3 

C 

55 IF (X - FN - 3.) 1111,1111,200 

C 

C CALCULATION OF J- 1 AND 1-1 

C 

65 N = 1 

BJO = BJN 
BIO = BIN 
BYO = BY 
BKO = BK 
GO TO 3 
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t 1 ! PS 



Node 



22 

25 

28 

27 

29 



20 



23 



C 

C 

C 



c 

c 

c 

c 

c 

c 



c 

c 

c 

c 



c 

c 



-Code 

COMPUTATION OF K-ZERO AND Y-ZERO 

75 BY = 2. /PI * (GAM + LOGF(XA)) * BJN 
BK = - (GAM + LOGF(XA)) * BIN 
T = XB 
S = 1. 

XI = 1. 

DO 110 K = 2 , K 
AK = K 

IF {(BY ♦ T*XI) - BY) 100, 120,100 
100 BK = BK * T* X I 

BY = BY ♦ 2./PI*S*T*XI 
T = T*X B / (AK*AK) 

XI = XI ♦ 1./AK 
110 S = -S 



120 IF (NORD) 9999,55,65 

COMPUTATION OF Y- 1 AND K- 1 BY WRONSKIAN FORMULAS 

130 BY = ( BJN*BYO - 2./(PI*X)) / BJO 
BK = (1. / X - 31 N*3K0) / BIO 

Y-N AND K-N BY RECURSION FORMULAS 
FOE ORDERS HIGHER THAN ONE 

P = 1. 

IF (NORD - 1) 9999,55,140 
140 BY1 = BY 
BK 1 = BK 

BY = 2 . *p / X*3 Y 1 - BYO 
BK = 2.*P / X * 3 Y 1 + 3Y0 

P = P * 1. 

IF (NORD - 2) 9999,150,146 

146 BYO = B Y 1 
BK = 3K 1 
NORD = NORD - 1 
GO TO 140 

150 N = P 

GO TO 3 
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Node 



3 

5 

10 

12 

13 



16 



18,24 



6,9,19, 

26,30 



C 

c 

c 

c 

200 



C 



210 



220 
230 
240 
24 1 



C 

C 

C 

c 



250 



C 

1111 

C 

9999 



Code 



COMPUTATION OF J-N, I-N, K 
BY ASYMPTOTIC EXPANSIONS 



C = 4 
D = 8 
CCN 1 
COM2 
CON3 
AN = 
PHI 
M = 

i: 1 

u = 1 

PN = 
QN = 
BK = 
BI = 



* NORD * WORD 

. * X 



= SQRTF (2 . / (PI * X) ) 

= 1./SQRTF (2. *PI*X) 

= SQRTF (PI/ (2. *X) ) 
NORD 

= X - ( 2 « * A N + 1.) / 4 

X + 1. + SORTF (X * X + 
C - 1.) / D 



1 . 

T 

1. + T 

1. - T 



DO 240 I = 2,H 
A I = 1 

T = (C - (2. *AI - 1 . ) **2) 

B K — BK + T 
BI = BI + T*S 
IF (S) 220,9999,210 

PN = PN - T*S*U 
0 = -U 
GO TO 230 

IF ( (QN + T) - QN) 230,24 1 
ON = QN - T*S*U 
S — — S 
CONTINUE 

BK = EXP? (-X) *CON3 *BK 

ASYMPTOTIC EXPANSION IS USE 
IF X IS BETWEEN N ♦ 3 AND N 



IF (X - FN -6.) 1 11 1,250, 

BJN = CONI * (PN*C05F (PHI) 
BY = CONI * (PN*COSF (PHI) + 
BIN = EXPF (X) * CON2 * 31 

NORD = FN 
RETURN 



STOP 



END 



N, AND Y-N 



. * PI 
AN * AN) 



/ D*T / AI 



,230 



D ONLY FOR K-N 

+ 6 

250 

- QN + SINF (PHT) ) 
0 N * S I N F (PHI) ) 
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APPENDIX c 



DIRECTIONS FOR USE OF THE ERROR SIMULATION PROGRAM 



Random numbers are drawn using the Naval Postgraduate 
School Random Number Generator Package LLRANDOM 
(NPS5 5LW 730 6 1 A) . These calls are RANDOM for a uniform 
distribution and EXPON for an exponential distribution. 

Printer plots are drawn by the PLOTP routine which is 
part of the IBM supplied routines. Directed graph plots are 
drawn by the DRAWP routine available on the Naval 
Postgraduate School IBM 360/67 System connected to a CALCOMP 
plotter. The subroutine GRAPHO is limited because it 
requires the directed graph to be constructed in such a way 
that the rightmost leg of the tree is the longest leg, which 
means that the rightmost terminal node is the lowest node. 

Histograms are plotted and analyzed by the HISTG routine 
available on the Naval Postgraduate School IBM 360/57. The 
functions SIN, COS and ATAN2 are standard IBM 
F ORTRAN-supplied subroutines. 

The analysis of loops in the simulation assumed that 
there were instructions in the arc from i to j and also in 
the backward arc from j to i. This nay not be realistic, 
but does prove useful when simulating the actual path. When 
an input reaches a branch point that has a backward arc 
emanating trom it, the model simulates a random number of 
iterations using the number of instructions in the backward 
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arc. After completing the simulated loopiny, it was 
possible to trace the same path or a different path if there 
were intermediate branch points. If the same path was 
selected, there was another chance for the backward arc to 
be selected. This is a common programming structure, where 
a loop is executed for so many iterations, a few parameters 
are changed and the loop is executed again for another or 
the same number of iterations. 

The comment section of the simulation program, titled 
"Directions for Use", describes the use of each data input 
to the program as well as the common values utilized during 
this research. The numbers along the top of the cards 
(Figures C-l to C-7) are the column numbers, the middle row 

of numbers are sample data and the bottom row of numbers is 
either the corresponding node for each piece of data or data 
item names. The formats used are shown below. 





col # 
data 



Fig C-l Each item in paragraph A of the directions for use 
is on a separate card with 13 format except item A (12) which 

is A5 format (*****). 
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Fig C-2 Adjacency matrix card - 1615 format. 
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FigC-6 The two nodes which determine the arc to be added or 
deleted from the structure - 215 format 
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Fig C-7 The seed for the random number generator - format 
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ERROR SIMULATION PROGRAM LISTING 
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IF £NiU)LS( l.KT) .EQ.O) GO TO 46 

45 CON T l.NIUE 

GET EKMI NC THE LAST NODE IN THE NEXT LEVEL AFTER THE PRESENT LEVEL 

46 DO 47 A = KK,N 

IF (NOUES(KK.M) .EQ.O) GU TO 47 
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0 AW (DIAMONDS AT EACH NODE 
I T3( 1 ) = 3 
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APPENDIX E 



OPERATING DESCRIPTION OF ANALYTICAL ERROR DETECTION PROGRAMS 

The analytic error detection model has been implemented as two FORTRAN 
programs, TRAV and EXP. Given a directed graph representation of a computer 
program with a unique start node and a unique exit node, branch probabilities 
and the expected number of errors on each arc, the programs compute the expected 
number of errors detected by each of a sequence of inputs that begin at the 
start node and end at the exit node. For example, for the program represented 
by Figure 1 with the indicated branch probabilities and the expected number of 
errors for each arc of 0.6, the output of program EXP is the table of Figure 2 
and the graph of Figure 3. 

The analysis assumes that an input is made at the start node, the arcs 
of the graph are traversed with the choice of arc at each branch node made 
according to the branch probabilities (which should sum to one for each branch 
node) and the input stops when it reaches the exit node. If an arc is traversed 
by an input, it is assumed that all the errors on that arc are detected and 
immediately corrected with no new errors introduced. 

The error detection table and graph (for example, Figures 2 and 3) 
indicate how easy or difficult it is to detect errors in the computer program 
that is represented by the graph. It is possible to see how the error detection 
process is affected by different error distributions and it is possible to get 
some idea of when to stop testing for a given distribution of errors. 

The computation is divided into two programs; the first computes the 
traversal probabilities for the graph--this is done only once for each graph. 

The second program uses the output of the first program plus an estimate of 
the expected number of errors on each arc to compute the expected number of 
errors detected. Typical use involves using the second program repeatedly with 
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GRAPH HR E XP E C T ED NUMBER OF ERRORS DETECTED -VS- NUMBER OF INPUTS 
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different error estimates. The compute time and storage requirements for the 
first program is many times that for the second program. 

Program Trav 

The first program, TRAV, computes for each arc the probability that an 
input beginning at the start node will traverse the arc. Since the first time 
an arc is traversed all errors are detected and corrected, it is not of interest 
if the arc is traversed one time or many times by a single input; thus the traversal 
probability is the probability of traversing the arc one or more times. 

It is necessary that the user identify the arcs that can be traversed 
more than once by a given input; these arcs, called "repeated" arcs, must be 
treated differently in the computation. In the example, because arc 1 2 -> 3 
loops back, arcs 3->5, 5 12, 3->6, 6 1 2 and 12 •* 3 are repeated 

arcs. (They are the only repeated arcs in Figure 1.) If a repeated arc is not 

identified by the user, the traversal probability will be wrong (too high). 

The traversal probability of a non-repeated arc that is erroneously identified 
as a repeated arc will be correct. However, since the calculation for repeated 
arcs involves inverting a matrix it saves computer time to correctly identify 
the repeated arcs. 

For non-repeating arcs, the computation of the traversal probability 
is easy: The probability of reaching any node is the sum of the traversal 

probabilities of arcs coming into that node. The traversal probability of 
arcs leaving a node is the branch probability of that arc times the probability 
of reaching the node. For repeating arcs the calculation is more complex; 
for example, in Figure 1 the probability of reaching node 3 is 1/2 but the 
probability of traversing arc 3 -* 5 is greater than 1/4 because even if an 
input traverses arc 3 -> 6 there is some chance that node 3 will be revisited 

via arc 12 -> 3 and arc 3 5 then traversed. The probability of traversing 

arcs 3 -> 6, 6 •* 12 and 12 -* 3 and then traversing 3 + 5 for the first 
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time is 1/4* (1/2) • (1/2) = 1/16. The probability of traversing arc 3+6 
twice then traversing arc 3+5 is 1/16(1/2)1/2 = 1/64. Thus the traversal 
probability of arc 3 + 5 is 1/4+1/16+1/64+ ... = 1/3. Program TRAV com- 
putes the traversal probability by means of a Markov chain analysis. 

The input to program TRAV is the directed graph and its branch probabilities 
Each arc is input giving its tail node, its head node, its branch probability 
(i.e. probability of traversing the arc given you are at its tail node) and 
an indication if it is a repeated arc. Also input is the start and exit node 
numbers. The node numbers can be any integers between 01 and 99. There may 
be multiple arcs between the same two nodes. Since the sum of the branch 
probabilities from any node should equal one, the program checks for this. 

There should be no arcs branching from the exit node; the program checks for 
this also. The arcs can be input in any order. 

Input format for program TRAV: 

Card 1. (20A4) Alphanumeric title card. 

Card 2. (IX, 12, IX, 12) Start node number and exit node number 

Card 3 etc. (IX, 12, IX, 12, IX, A1 ,2X,F 10.5) for each arc of the graph, tail 

node number, head node number, alpha character ' R 1 indicates that the arc 
may be repeated, branch probability which is the probability that the arc 
will be traversed if you are at its tail node. 

Last card. 00 or blanks in columns 2 and 3. 

The output of the program is a printed and punched description of each 
arc with its branch and traversal probability. The punch output is ready 
(with some additions described below) for input to the second program. 

Punch output of program TRAV: 

Card 1 . Ti tie card 

Card 2. Card to insert no. of inputs for expected errors program. 
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Card 3 etc. Same as input except for traversal probabilities added (F10.5) 
in columns 21 to 30. 

Last card. 00 in columns 2 and 3. 



Program TRAV is presently limited to 99 arcs. To accommodate more 
it is necessary to change "IDIM" and the arrays indicated in the comments 
cards of program TRAV and its subroutine MARKOV. 

Data checks are made on the input and output: 

Input check no. 1. Input format forces node numbers to be less than 100. 

Input check no. 2. Check for input limit of 'IDIM' arcs. 

Input check no. 3. Exit node should have no arcs branching away from it. 

Input check no. 4. No branch probability should be less than zero or greater 

than one. 

Input check no. 5. Check if there exist paths from start node that do not 
reach exit node. 

Input check no. 6. Check that sum of branch probabilities from all nodes 
equal approximately one. If it does not, print warning and then divide 
by sum to make it equal to one. 

Input check no 7. Check that start node is the tail of some arc and that 
exit node is the head of some arc. 



The storage required depends on the number of arcs squared and the 
calculation of repeated arcs involves the inversion of a matrix that has a row 
for each arc. Thus storage and computer time can be reduced by decomposing a 
graph. For example. Figure 1 can be decomposed into two graphs, one with arcs 

3 + 5, 3 + 6, 5 + 12, 6 + 12, 12 + 16 and 12 + 3 replaced by an arc 

3 + 16 with branch probability 1 and the other with arcs 1+2, 2 + 3, 3 + 5, 

3 + 6, 6 + 12, 5 + 12, 12 + 3, 12 + 16 and an arc 2 + 16 with branch 

probability 1/2. The results of two applications of program TRAV can be com- 
bined to give the results for the original graph. 
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Computer time can also be saved by analyzing the graph before using 
the program. For example, in Figure 1, it is clear that the traversal probability 
of arcs 3 6, 3 -* 5, 6 -> 1 2 and 5 12 are equal. Thus only one need 

be marked "R" in the input (saving 3 inversions); the punch output can then 
be changed to correct the values for the 3 arcs without an "R." 

Program EXP 

The second program, EXP, computes the expected number of errors 
detected for a sequence of inputs. The input is the punched card output of 
the TRAV program, the expected number of errors for each arc and the number of 
inputs. The output is figures 2 and 3. 

The calculation of the expected number of errors detected (and corrected) 
is straightforward. Let p. be the traversal probability for arc j computed 

J 

by the TRAV program and p. be the expected number of errors. The expected 

J 

number of errors detected by the first input is £ p.p. where the summation 

J J 

is over all the arcs of the graph. After the first input the expected number 
of errors in arc j is p^ = y j H -Pj ) (where the 2 indicates this is the 
expected number of errors before the second input). The expected number of 

+ h 

errors detected by the second input is £ In general, for the k— 

input the expected number of errors is £ p..p. where p.. = p.-(l-p)^"^ . 

J K J J K J 

Input format for program EXP: 

Card 1. Title card output from traversal program. 

Card 2. (13) Number of inputs to the directed graph. 

Card 3 etc. Traversal probability output from traversal program. 

Card N. Final traversal card, 00 or blank in columns 2 and 3 output from 
traversal program. 

Card N+l etc. (8F10.2) Expected number of errors for each arc. Ordering 
same as traversal probability input above. 

Last card. No final card is necessary. 
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The output is a table and a graph of the expected number of errors 
detected and a graph of the cumulative number of errors detected. 

Program EXP is currently limited to 99 arcs just as program TRAV. It 
is also limited to 150 inputs, to accommodate more inputs it is necessary to 
change "LIMIT" and the arrays indicated in the comments cards of program EXP. 

The graphs are produced by two FORTRAN subroutines developed by the 
NPS computer staff. 

Data checks are made on input: 

Input check no. 1. Check if number of inputs is less than 'limit'. 

Input check no. 2. Check if expected number of errors is nonnegative. 

The listings and sample input and output are attached. 
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FI GUP:. 1 



ERROR Ofc TFCT I l R MODEL 



y a 

w .. 


INPUTS 
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12 
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1.00000 


0.33333 


12 
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C. 50000 


0.25000 


12 


16 




0.50000 


C. 50000 


i 1 


13 




1 .00000 


0.08333 


13 


16 




l .ocooo 


3. 16667 


14 


16 




1.00000 


J. 25000 


7 


11 




0.50000 


0.38333 


8 


14 




l .C 0000 


0.16667 
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2 




1 .00000 


1.00000 
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3 




0.50000 


0.50000 
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4 




0.50000 


0.50000 
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7 




0.33330 


0.16667 
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8 




0.33330 


0.16667 
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9 




0.33330 


0.16667 
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10 

14 




G .500 00 


0.08333 


9 




0.50C 00 


9.08333 
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15 




0.50000 


0.08333 


1C 


13 




1 .1 0000 


0.08333 


15 


16 




1. OCOOO 


0.08333 
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0.50C00 


0.33333 


3 


6 
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0 . 5 CO 00 


0.33333 


5 


12 
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1 .OCOOO 


0.33333 


00 0 


.6 




. 6 


.6 




. 6 




.6 


.6 




• 6 




.6 


. 6 



6 

.6 

6 



• 6 
.6 
.6 



.6 

.6 

.6 



.6 

.6 



Card input to program EXP 
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EXPECTED NUMBER OF ERRORS DETECTED 



VERSION 1.0 



PROGRAM TITLE: 



ERROR DETECTION-MODEL FIGURE— l- 



I N PUT S = 20 

NUMBER OF ARCS = 22 

A RC 



TAIL 


hEAD 


6 


12 


12 


3 


12 


1 6 


11 


13 


13 


16 


14 


16 


7 


— 11 


8 


14 


1 


2 


2 


3 


2 


4 


4 


7 


4 


3 


4 


9 


7 - - 


— 10 


9 


14 


9 


15 


10 


13 


15 


16 


3 


5 


3 


6 


5 


12 



BRANCH 
PROB. 
l.COCO 
C. 5000 
C • 5000 
1 . COCO 
1.0000 
1 .0000 
C • 5000 
l.CCOO 
1.0000 
C . 5000 
C . 5000 
0.3333 
C. 3333 
0.3333 
C . 5000 
C. 5000 
0.5000 

1 . ooco 
1.0000 
C .5000 
0.5000 
1.0000 



— TRAVFRSAL- 
PROB. 
0.3333 
0. 2300 
0.5000 
0.0833 
0. 1667 
0.2500 

— 0.0833 

0. 1667 
1.0000 
0.5000 
0.5000 
0.1667 . 

0. 1667 

0 . 1667 

— 0.0833 — 
0. 0833 
0.0833 
0.0833 ~ 
0. 0833 
0.3333 
0.3333 
0.3333 



•EXPECTED NUMBER- 
OF ERRORS 
0.60 
“ 0.60 
0.60 

0.60 .... 
0.60 
G • 60 

0.60 

0.60 

0.60 

0.60 “ 

0.60 

0.60 

0.60 

0.60 

0 . 60 

0.60 

0.60 

c#60 

0.60 

0.60 

0.60 

0.60 



INITIAL EXPECTED NUMBER OF ERRQRS= 



13.20 




— EXPECTED NUMBER - - 
OF ERRORS DETECTED 
3. A3 

i.95 "" 

1.39 

1.04 

0.80 

0.63 

0.51 

0.42 
C. 36 
0.30 
0.26 

0.22 

0.20 

0.17 

C . 15 

0.13 

0.12 

0.11 

0.09 

0.08 



CUMMULATI VE 

- EXPECTED NUMBER 

OF ERRORS DETECTED 
3.45 

5#/f0 

6.79 

7.82 

8.62 

9.25 

9 . 76 

10.19 

10.54 

— — 10 .85 

11.10 

11.33 

11.52 

11.69 

11.34 

11.98 

12.10 

1 . 2.20 

12.30 

12.38 



Output of program EXP 
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PAPH l' F C UK "lUL AT I VE EXPLCTEO NUMBER OF ERRORS DETECTED -VS- NUMBER OF INPUTS. 
PJGRAM TITLE: ERROR DETECTION MODEL FIGURE 1 



10.30 


1*00 5.75 10.50 15.25 

♦ 

* 

# • 
* * 

* * 

* 

* 

* 

* 


11’. Of) 


+ 

* 

. 

* 

* 

* 

* 

Tfc 

. 


B . 20 


+ 

* 

* 

* 

* 

* 

* 

X 


o. 15 


# 

+ 

* 

* 

* 

* 

* 

*T 

* 

* 


5 . 10 


+ 

* 

* 

* 

* 

* 

A 

* 


2 . C5 


+ 


0.0 


❖ 

* 

* 

♦ 

¥ 

* 

* 

+ . 

** + #***S* r # ***+«* $***#*- *+** ****** *+****** ** * + ** ** <=>Jc ** * + ****** *** + **** 

1.00 5.75 10.50 15.25 




X-SCALE : "*" = Q.237E 00 UNITS 

Y-SCAtE; "*" = 0.2C5E UO UNITS 

INPUT NUMBER 



Output of program EXP 
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GRAPH. GE EXPE CTEJ NUMBE R OF Ehh-C RS CtT E CT LD -YS_^ JJ UMB ER_J.f_iaPUTS. 



PRO G RAM T - I - TI -4-: ERRO R ULT i zGT I CN- MGUEL F IoUPE - 1 





0 . 45 


1 .OC - 5.75 

* if + * if >! * if i, * i * + if if * * # * if if + if # if if 

+ . . 


itr.i50 — ns 


.Z5~ 
* + #*: 
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if 

± 






if 

if 










if' 

* 

if 








2.89 


if 

+ 






* 

* 






* 

* 
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# .. . ... 








2.33 


+ 










if 

if 






* 

±. 




1777 


’ V 

* 

* 








+ 

if 

if 










if 

if 






* 

* 




L * 21 


* 










* 

❖ 

Vr 
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